I run acme.sh on Alpine with openrc, no cron at all, I just ssh in and run it manually every 60 days. Am I a monster?
What do you use for certificate management without systemd?
adam_deal said:
Run it manually every 60 days
You will forget. Or get hit by a bus. Or both. Then the cert expires and someone else deals with it.
Automation is not about convenience, it is about removing single points of failure.
3-2-1 or you're already dead
bellaauc said:
You will forget
I did forget. Last month. 3AM page from uptime robot because the site threw a cert error. Took me twenty minutes to fix, twenty minutes of downtime on a store. Never again.
I am still using a cert from 2019 that I renew manually because the server is in a closet in Sao Paulo and I only visit it when I visit my mother. It works. Do not fix it.
Elena said:
2019
Let's Encrypt certs are 90 days. You mean you have been manually renewing every 90 days for six years? Respect, but also please automate before you cannot get to the closet.
Back to the original question: I am also on RackNerd openrc, I use acme.sh installed via git, no init script at all. Just added this to root crontab:
0 3 * * * /root/.acme.sh/acme.sh --cron --home /root/.acme.sh >> /var/log/acme.log 2>&1Works for a year. Check the log if you worry.